mindscreen/yarnlock

Usable with caveats: the package is clearly licensed, tested, documented, and tied to the matching repository, but maintenance has slowed materially. Its last registry release was nearly two years ago and the repository had no commits in the last three months.

Latest v1.1.1

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

Only four releases have been published since February 2018, with no release in the last 12 months; this indicates a slow maintenance cadence, though the latest release is reasonably recent.

Repo commit activity

There were no commits and no active maintainers in the last three months, a meaningful sign of currently low maintenance capacity; the January 2026 push partially offsets but does not remove this concern.

Repo issue activity

There were no issues or pull requests opened or closed in the last month, while one issue and three pull requests remain open; this suggests limited recent project attention.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. For this small library that is a hygiene gap rather than a severe dependency risk.

Security policy

The repository has no security policy, reducing transparency about vulnerability reporting and response expectations.